Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json)
Hash identifier: 55jY0YLgVX3OkNa0OcYCiniqQHj3O+UB3YakcdcQhbo=
Subject key identifier: C8:E5:4E:A2:8E:CE:B3:34:40:03:F1:BE:03:99:B6:0B:45:32:B0:B4
Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92
Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792
Certificate serial: 349B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
Manifest number: 3484
Signing time: Fri 28 Mar 2025 14:51:10 +0000
Manifest this update: Fri 28 Mar 2025 14:51:09 +0000
Manifest next update: Fri 04 Apr 2025 14:51:09 +0000
Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: 6a2s4GCol7OQL8Tr5/Hki84ymsktPxsWPorSM4WiMa0=)
2: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: AsLmLNpdLhba6hfcYMLpd0sVqrUh2auGXL+sqK0hCjo=)
3: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: LT0aNSmVv5vvmR7dpu4yqP0BpA8hfoKsmy5XfMM5RqM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13467 (0x349b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9484
Validity
Not Before: Mar 28 14:51:09 2025 GMT
Not After : Apr 4 14:51:09 2025 GMT
Subject: CN=67e6b75e-d2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:2b:0e:6f:89:e5:fd:c7:73:67:6a:e1:23:
76:f7:ce:d5:ae:7d:db:1b:8c:4e:79:43:df:2c:3b:
fa:55:4e:b7:9b:31:da:bb:c8:39:c7:af:9a:7b:20:
4d:6d:5c:2c:1f:51:a2:72:51:4c:65:35:82:ef:ab:
6e:12:0f:10:75:5f:06:68:e9:d0:1a:16:d7:da:89:
49:cb:eb:4c:dd:b1:d8:e0:6b:19:79:50:54:3a:a7:
64:0b:c5:c2:09:60:bb:d8:ae:6a:73:12:13:55:5f:
d7:d8:f5:cb:73:59:7b:93:63:76:3a:ad:fa:d3:84:
ef:78:08:ad:53:6c:c7:15:3f:97:a9:d9:fc:1a:b3:
80:01:9d:7b:78:27:fe:5e:16:98:c4:77:a5:43:94:
68:79:7c:18:31:b6:a1:68:5b:63:f8:6f:1b:e5:e2:
2e:3f:7c:44:a9:9a:76:dc:42:a8:d7:35:a5:0e:37:
3c:93:d1:f9:15:72:cf:3c:5b:bc:5d:f5:a7:6a:93:
6c:c0:cb:83:8c:7d:d5:17:61:04:e4:e1:2f:3f:6f:
80:25:05:9c:73:95:6f:b4:02:5c:ce:d6:c1:ed:f0:
1a:90:3b:21:a5:a6:d1:bb:01:75:58:ba:09:75:80:
5d:76:85:0a:88:23:2e:63:95:dc:2f:0e:08:9e:fd:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E5:4E:A2:8E:CE:B3:34:40:03:F1:BE:03:99:B6:0B:45:32:B0:B4
X509v3 Authority Key Identifier:
keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:60:9f:0c:89:50:4c:95:27:fe:09:45:7f:8b:b2:cf:06:eb:
8e:81:b4:07:4f:e5:84:29:85:aa:f3:f9:de:8e:e6:ac:28:55:
ef:b2:95:3f:5a:5c:21:b0:aa:51:78:6e:3e:18:0b:fe:73:cf:
06:f3:ae:e6:ac:59:1d:35:90:c1:9a:62:e7:93:94:b1:1c:50:
ac:b1:a9:01:77:b7:01:be:0b:92:56:06:af:88:f8:90:17:b5:
12:26:07:d2:99:63:84:60:02:88:10:a2:0a:ae:a3:f0:25:29:
67:64:96:50:d0:a3:a8:81:34:9e:32:11:1c:9b:dd:69:89:62:
cb:2a:1d:3c:c9:b0:d1:d6:b2:1b:8b:9c:62:59:e2:d3:b8:f6:
cb:a3:05:27:e6:ac:e2:8a:9b:1e:1c:89:aa:9d:89:30:cc:e6:
0b:a5:b1:6f:df:5f:ff:b1:7f:30:e1:bc:49:b0:b4:ca:b0:c1:
6d:20:03:63:e6:4e:12:6b:bf:00:3d:34:5b:c9:0e:55:2a:05:
64:d0:7c:05:fa:07:c8:e2:d4:73:5e:4a:0f:7d:86:76:a5:ef:
db:6b:30:47:85:62:a1:65:05:d1:3f:94:c1:37:d0:61:ef:a5:
24:c9:d8:7f:03:a6:58:4f:1f:3f:38:fc:be:00:71:b1:fc:68:
d8:7a:d1:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0
QTg5QzQ3OTIwHhcNMjUwMzI4MTQ1MTA5WhcNMjUwNDA0MTQ1MTA5WjAYMRYwFAYD
VQQDEw02N2U2Yjc1ZS1kMmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzX8rDm+J5f3Hc2dq4SN2987Vrn3bG4xOeUPfLDv6VU63mzHau8g5x6+aeyBN
bVwsH1GiclFMZTWC76tuEg8QdV8GaOnQGhbX2olJy+tM3bHY4GsZeVBUOqdkC8XC
CWC72K5qcxITVV/X2PXLc1l7k2N2Oq3604TveAitU2zHFT+Xqdn8GrOAAZ17eCf+
XhaYxHelQ5RoeXwYMbahaFtj+G8b5eIuP3xEqZp23EKo1zWlDjc8k9H5FXLPPFu8
XfWnapNswMuDjH3VF2EE5OEvP2+AJQWcc5VvtAJcztbB7fAakDshpabRuwF1WLoJ
dYBddoUKiCMuY5XcLw4Inv0W3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjlTqKO
zrM0QAPxvgOZtgtFMrC0MB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE
OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS
NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTQ4NC82RkYwRERFMDFEOTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVj
NFpBWk1NUTlGdHhLaWNSNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCBYJ8MiVBMlSf+CUV/i7LPBuuOgbQHT+WEKYWq8/nejuasKFXvspU/
WlwhsKpReG4+GAv+c88G867mrFkdNZDBmmLnk5SxHFCssakBd7cBvguSVgaviPiQ
F7USJgfSmWOEYAKIEKIKrqPwJSlnZJZQ0KOogTSeMhEcm91piWLLKh08ybDR1rIb
i5xiWeLTuPbLowUn5qziipseHImqnYkwzOYLpbFv31//sX8w4bxJsLTKsMFtIANj
5k4Sa78APTRbyQ5VKgVk0HwF+gfI4tRzXkoPfYZ2pe/bazBHhWKhZQXRP5TBN9Bh
76Ukydh/A6ZYTx8/OPy+AHGx/GjYetH9
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:48 2025 by rpki-client